Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa
File:                     28d96272-161b-3891-8090-89041daa39a7.roa (raw, json)
Hash identifier:          ULqPOYyLWzQXejoBlPQtNwBGTkbmgShCS7lkDWnoCEI=
Subject key identifier:   0C:F1:EF:56:27:9C:BD:1B:A1:A7:BE:EF:38:73:1D:CF:CF:C3:54:3B
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858456C532380B0504F5C33635940
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        164.55.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:23:80:b0:50:4f:5c:33:63:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e22e298c-738f-4060-bdd7-0aafaba505f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:cf:fb:d6:60:53:ea:e8:4c:e8:48:cc:d5:
                    c7:fe:9d:9d:f3:28:87:f7:33:ec:27:cc:6c:bf:7a:
                    49:a3:eb:1a:c2:af:36:78:74:52:58:58:79:cf:f5:
                    9e:28:29:6d:5e:10:bc:a7:d3:fe:75:6a:c6:b6:2a:
                    2d:9d:7f:c5:28:b9:a3:9f:5b:c3:33:63:3c:21:c2:
                    41:e8:5c:55:25:77:81:6e:e1:4b:b1:5b:54:a5:4d:
                    75:e6:11:59:51:39:98:d3:bb:f3:ae:15:fa:53:71:
                    60:b6:05:c2:2f:07:92:ef:cf:a0:33:cc:00:93:1a:
                    98:8e:cd:da:88:a0:ba:62:8a:bf:37:02:42:4c:2d:
                    56:c9:36:a7:a4:de:fb:3a:2c:a0:8b:48:8c:35:a3:
                    a5:a0:b2:0d:68:d8:f5:89:c5:60:be:c0:dc:61:ed:
                    73:24:34:33:f7:5c:3f:48:12:09:2a:66:6e:77:6a:
                    66:fe:d6:6c:59:a4:2c:ce:fa:db:32:58:08:4a:da:
                    e1:e5:9b:bb:d1:ec:5b:a5:ca:40:47:c6:ec:d6:85:
                    4a:12:bb:d9:35:9b:0d:7e:71:4c:ff:8a:29:69:22:
                    15:1b:8c:2e:df:57:6d:c8:b2:f9:fd:3a:13:0d:ab:
                    c3:98:e7:f9:73:38:e4:a5:22:00:f9:4c:a0:e5:c3:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:EF:56:27:9C:BD:1B:A1:A7:BE:EF:38:73:1D:CF:CF:C3:54:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:e1:4f:b4:2f:f5:ff:e6:83:62:ab:81:93:b6:eb:6f:1d:
         7b:7e:d8:2a:eb:56:76:a1:03:e1:da:c0:0c:7a:f9:13:74:27:
         5d:11:82:14:de:1e:ef:cf:98:48:2c:a1:ad:c9:24:3f:ba:33:
         64:e4:93:10:00:db:8c:f3:72:a5:e7:9e:e8:a8:ec:d1:7d:bd:
         95:7b:49:2c:8b:1b:72:d1:55:bb:78:60:34:bf:53:cc:f6:b5:
         e4:b8:6e:26:a9:e6:c2:2f:8e:b1:c1:06:a1:c4:89:f8:ba:ec:
         84:2d:b7:9d:9f:4e:8a:27:01:40:ac:a1:e0:ee:38:2d:d8:ba:
         d6:6a:4a:9b:61:a5:aa:2f:7b:86:34:b1:5d:ca:79:dd:50:e1:
         19:e0:97:8a:56:24:50:71:66:fa:ae:71:e3:70:9a:4d:9f:ee:
         a7:aa:07:c3:28:21:df:0f:16:fd:e3:16:d3:31:c2:d1:58:d1:
         ce:75:d2:cf:77:03:0f:90:88:aa:2c:1e:bf:b5:5c:9b:24:34:
         31:2a:d1:63:70:29:13:5d:a3:f3:c5:b7:6e:25:00:77:3a:36:
         1e:0e:b2:3c:e8:93:b6:82:4e:d7:22:f5:c8:aa:91:74:f3:4f:
         d0:e9:f7:df:32:3f:c1:e9:ab:fc:b6:c6:0e:69:84:ff:03:20:
         58:b8:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:02 2024 by rpki-client on console-ams.rpki-client.org